F5 Network Engineer

Booz Allen Hamilton•Charleston, SC

About The Position

F5 Network Engineer The Opportunity: A well-designed network is critical to move data and enable the Navy to achieve its missions, but how can an organization make sure its network will fit its current and evolving needs? Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That’s why we need you, an experienced network engineer who knows how to develop the exact network the Navy needs. As a network engineer on our team, you’ll use your F5 network engineering experience to support the nation’s defense and respond to evolving adversaries. You’ll operate and maintain the F5 BIG-IP platform and increase security, reliability, and availability for mission-critical network systems. You’ll apply your F5 network expertise as you join our team of problem-solvers to perform TMOS version management, patching, vulnerability remediation, and bug fix implementation. Continuously evaluated performance and delivered recommendations to support lifecycle strategy, stability, and capacity planning. Your knowledge of BIG-IP platforms will come in handy as you optimize client operations and modernization. Using your Network Engineering experience, you’ll serve as a trusted advisor to clients on mission-critical projects. Using your technical curiosity and knowledge of industry standards, you’ll make an impact on national security missions. Join us. The world can’t wait.

Requirements

Ability to translate business requirements into F5-based technical solutions
Secret clearance
HS diploma or GED and 7+ years of experience with F5 BIG-IP administration, including LTM, GTM, and ASM modules, or Bachelor's degree in Computer Science or Information Technology and 5+ years of experience with F5 BIG-IP administration, including LTM, GTM, and ASM modules
Security+ Certification

Nice To Haves

Experience with LAN and WAN administration
Experience with scripting languages, such as Python or TCL
Knowledge of network incident response, troubleshooting, and life cycle replacement
Ability to work with vendors, internal teams, and mission partners to expedite complex troubleshooting processes
CCNP Enterprise Certification

Responsibilities

Manage SSL/TLS certificates, including generation, renewal, import, export, and troubleshooting certificate-related issues
Implement and manage client certificate authentication, such as mutual TLS, and OCSP validation within APM or custom iRules
Design, configure, and implement F5 BIG-IP solutions, including LTM and APM modules
Design and implement custom iRules to manipulate traffic at Layer 7, enabling advanced routing, header injection, SSL enforcement, and session control for secure application access
Develop APM Access Policies for CAC/PIV authentication, extracting X.509 certificate attributes, such as UPN and EDIPI, and injecting values into HT TP headers for backend integration, such as ServiceNow and Oracle
Manage and maintain existing F5 BIG-IP infrastructure, including version upgrades, security patching, and performance tuning
Maintaining F5 ticket queue, troubleshoot complex mission systems, and new virtual server builds that include APM, LTM, iRules and security modules and WAF
Develop and maintain comprehensive documentation for F5 configurations, procedures, and troubleshooting guides
Collaborate with other IT teams, including network, security, and application teams, to ensure seamless integration and operation of F5 solutions
Stay current on the latest F5 technologies and best practices, attending training and obtaining certifications as needed
Participate in on-call rotation to provide after-hours support for critical F5 infrastructure